Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: I0RV3eVQU/g6NIQlrd4QTU+ouWQWBMl/FlF/3GyK2HA=
Subject key identifier: CE:9B:26:DD:F0:38:BE:EE:A0:FA:8F:0B:C9:70:68:27:C4:1E:7B:BC
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 0193542C96D7E3F79C0C5E79C428D47D6597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: C5
Signing time: Fri 22 Nov 2024 14:00:28 +0000
Manifest this update: Fri 22 Nov 2024 14:00:28 +0000
Manifest next update: Sat 23 Nov 2024 14:00:28 +0000
Files and hashes: 1: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: dF/p44MHAR+MbB4qyx3o1IM3cLOHW3Z325Rm7RiDUTg=)
2: eTAyFfH85bOWseqALyJwvD-vAhI.roa (hash: VWVfRQ8em06SNzvwvyYCqsoA2WudN+ZAYQXKUAizZ3Q=)
3: iunLhP0bE4vBGyoEJU3lC1kiMws.roa (hash: uQ2joKer9H7EXN9kCeF2wYuEnduTl9qdYbAVdUnM9hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:2c:96:d7:e3:f7:9c:0c:5e:79:c4:28:d4:7d:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Nov 22 14:00:28 2024 GMT
Not After : Nov 23 14:00:28 2024 GMT
Subject: CN=ce9b26ddf038beeea0fa8f0bc9706827c41e7bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:0e:d4:36:8c:b8:65:2b:22:52:13:99:30:
6f:75:30:6b:27:e8:b5:00:be:94:18:aa:97:8b:3a:
80:97:96:62:4b:e2:cf:26:48:44:b8:cf:fb:ea:7e:
0c:5d:c2:dd:4f:10:32:a1:f3:b1:3c:9c:11:51:09:
c9:2d:7d:1a:5f:21:04:db:52:5d:af:ab:de:a6:12:
a5:b6:cc:c3:a4:8a:48:66:92:9a:72:34:03:51:ce:
0a:fb:67:4b:30:41:dc:f0:67:73:46:85:39:df:35:
5d:22:8c:ff:27:c5:68:56:09:29:0a:0b:e2:47:64:
c4:b4:45:72:f1:b3:ec:ad:ae:cf:8c:ca:57:dc:b6:
d1:44:75:27:0e:b5:3a:ec:7a:25:0f:16:60:e2:89:
a3:34:d6:62:4f:25:51:9a:65:c8:ae:fd:e6:10:ff:
15:8e:c9:60:8a:f1:60:b6:7b:db:bc:c0:38:51:d4:
6f:83:c7:47:75:2f:3e:ad:a5:5d:5d:0b:7f:4f:c7:
21:81:90:4c:83:21:b0:36:8d:c1:5d:ba:08:ad:b8:
c0:5f:c7:ac:92:3f:92:05:3a:95:c1:b9:67:48:7a:
93:e9:65:dd:a6:0a:d1:5b:d7:fd:5c:01:72:ab:ac:
b6:95:85:32:4d:0c:35:fb:41:7b:0d:1a:3c:c4:dc:
c8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9B:26:DD:F0:38:BE:EE:A0:FA:8F:0B:C9:70:68:27:C4:1E:7B:BC
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:21:5e:0f:74:62:12:05:0d:d8:b1:50:c2:58:bc:a7:cf:5d:
b9:9c:14:92:f5:ab:08:f4:da:59:2b:49:b8:2b:89:df:e8:7e:
53:c3:fb:81:e1:80:f4:07:65:22:d4:ec:b0:16:5f:ed:dc:15:
ce:39:02:5b:ae:e7:e6:04:53:ee:9a:1b:f0:d1:2d:f9:60:74:
19:97:a7:98:f5:14:37:54:d3:b6:9d:74:36:0f:b9:98:35:ef:
ba:85:34:a2:0e:42:66:17:5e:f3:5c:44:f5:ac:b1:bd:d2:bd:
74:89:5e:17:f1:9e:a1:c1:5c:21:4b:d4:af:78:80:21:27:18:
cc:ee:26:0e:af:81:af:e7:58:a2:c3:9e:6b:07:f7:d1:29:2e:
53:44:43:6b:fd:cc:2d:e4:35:f3:cf:39:48:13:bb:4b:50:d1:
90:43:3d:0e:93:73:55:ce:42:bc:bb:3e:0a:b6:50:a9:e3:1c:
9a:1e:fa:e7:7f:3b:e2:e6:c9:42:5a:3c:be:fd:8a:cc:c1:a8:
e2:cc:3f:07:03:59:45:ed:34:28:39:60:60:1d:14:03:4c:77:
ce:68:74:75:79:78:62:48:cf:67:3d:5e:e8:72:0d:f7:d9:61:
b4:93:55:29:70:71:08:87:57:d9:8d:3d:b9:0f:ca:a2:bc:b4:
eb:d5:35:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNULJbX4/ecDF55xCjUfWWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm
MjhmNmMwHhcNMjQxMTIyMTQwMDI4WhcNMjQxMTIzMTQwMDI4WjAzMTEwLwYDVQQD
EyhjZTliMjZkZGYwMzhiZWVlYTBmYThmMGJjOTcwNjgyN2M0MWU3YmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlx0O1DaMuGUrIlITmTBvdTBrJ+i1
AL6UGKqXizqAl5ZiS+LPJkhEuM/76n4MXcLdTxAyofOxPJwRUQnJLX0aXyEE21Jd
r6vephKltszDpIpIZpKacjQDUc4K+2dLMEHc8GdzRoU53zVdIoz/J8VoVgkpCgvi
R2TEtEVy8bPsra7PjMpX3LbRRHUnDrU67HolDxZg4omjNNZiTyVRmmXIrv3mEP8V
jslgivFgtnvbvMA4UdRvg8dHdS8+raVdXQt/T8chgZBMgyGwNo3BXboIrbjAX8es
kj+SBTqVwblnSHqT6WXdpgrRW9f9XAFyq6y2lYUyTQw1+0F7DRo8xNzIlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6bJt3wOL7uoPqPC8lwaCfEHnu8MB8GA1UdIwQY
MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt
YTM4NTU1MDVlYTJlLzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl
LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCFeD3Ri
EgUN2LFQwli8p89duZwUkvWrCPTaWStJuCuJ3+h+U8P7geGA9AdlItTssBZf7dwV
zjkCW67n5gRT7pob8NEt+WB0GZenmPUUN1TTtp10Ng+5mDXvuoU0og5CZhde81xE
9ayxvdK9dIleF/GeocFcIUvUr3iAIScYzO4mDq+Br+dYosOeawf30SkuU0RDa/3M
LeQ18885SBO7S1DRkEM9DpNzVc5CvLs+CrZQqeMcmh7653874ubJQlo8vv2KzMGo
4sw/BwNZRe00KDlgYB0UA0x3zmh0dXl4YkjPZz1e6HIN99lhtJNVKXBxCIdX2Y09
uQ/Kory069U1rw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:23:38 2024 by rpki-client on console-ams.rpki-client.org